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oxteacutive eames 
THE WHITE HOUSE | Es, 


WASHINGTON 


August. 31, 1978 ee = : TRA 050 


MEMORANDUM FOR THE HEADS OF 


EXECUTIVE DEPARTMENTS AND AGENCIES 


Enclosed for your information is a copy of the Third 
Annual Report on executive braneh administration of the 
Privacy Act of 1974, which I recently transmitted to the 
Congress. 


The protection of personal privacy is of great concern ta 
the American people, and an important priority of my 
Administration. I urge you to personally review this report 
and take steps to further improve your agency's administra- 
tion of the Privacy Act. 


The report indicates that many agencies have made substantial 
improvements in their implementation of the Act. [I urge 
each of you, however, to initiate additional efforts during 
the coming year to reduce the amount of personal information 
collected and maintained by the Federal government, to 

avoid unwarranted disclosure of this information, and to 
improve the internal management of personal data systems 


I have asked the Director of the Office of Management and 
Budget to monitor these efforts and to keep me informed 
of your progress. 
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~~" ghe privacy Act of 1974 (Public Law 93-579) provides that: 


"The President shall submit to the Speaker of the House 
and the President of the Senate, by June 30 of each 
calendar year, a consolidated report, separately listing 
for each Federal agency the number of records contained in 
any system of records which were exempted from the applica- 
_ tion of this section under the provisions of subsections 
-(j) and (k) of this section during the preceding calendar 
year, and the reasons for the exemptions, and such other 
information as indicates efforts to administer fully this 
section." (5) 0.820. S53 2a (py ys 


* This ‘Third ened Report. of executive branch activities 
under the Privacy Act covers operational experience. during 
Calendar year 1977. The report is based upon information 
Submitted to OMB by executive branch agencies and OMB 
experiences in overseeing implementation of the Act. 


| recognition of a fundamental right of individual privacy 
cwhich | is protected by the Constitution of the United States, 
“vthe “Privacy Act of 1974 established a system of checks and 
‘balances to regulate the collection, maintenance, use and 


"dissemination of personal information by the Federal Govern- 
ment in order to achieve a balance between the Government's 


_ need to know and the individual's right to privacy. Under 


duals have a right to: 


Know about and review personal information maintained 
ap One “them by Federal agencies. 


Request enae: personal information which hey believe 
to. aioe incorrect be amended or corrected. 


epee coerce agency ‘decisions relative to requests 
or amendment or correction. 


ue an agency in oC. Ss. District Courts for violations 
£ the Act. 


i eceeeuieo and agencies are responsible for: 
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‘was placed on identifying and inventorying the nature and 
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aoe 


° Collecting and maintaining only that personal infor- 
mation which is relevant and necessary. 


° Maintaining personal data in a timely and accurate 
manner. 


co) 


Safeguarding personal data and limiting unauthorized — 
disclosure of such data. ote ey + 3 
Assuring adequate opportunities for public scrutiny 

and comment on agency personal recordkeeping practices. 


>) 


The Office of Management and Budget is responsible for: _ 


° providing oversight and assistance to agencies in 
their implementation of the Act. a 


II CONCLUSIONS ee Pee -t Per 


The first two years of operation under the Privacy Act were 
devoted to the establishment of agency programs, policies 
and procedures for implementing the Act. Special emphasis 


magnitude of personal data which is coilected and maintained 
by the Federal Government. 

During 1977 many agencies undertook a comprehensive 
review of the types of data which they maintain about 
American citizens and their internal programs for managing 
this data. : 


Conclusious that can be drawn from experiences during 1977 
are: , , 


: . Pog 

° Many agencies continued to devote significant 
resources to refining their programs for 
administering personal data. 


° A number of agencies achieved significant reductions 
in the amount of personal data they maintain. : 


° Federal personal recordkeeping remained fairly stable 
@uring 1977, with agency reduction efforts balanced by 
growth in the size of some systems of records. 


° Agencies are increasing their use of computers to main- 
tain personal data. 
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involved in only 568 of 6,424 
systems 0: pat those systems account 
for 48.9% of records. 


There was li ittle public comment received by Federal 
agencies during 1977 relative to the Privacy Act. 


he Federal Recister is not an effective means for 
eee public comment on agency privacy issuances. 


The cost’ of publishing agency Privacy Act notices in 


“the Federal Register is significant. 


Agencies placed greater enonasts on Sapeguaneene 
personal data during 1977. 


The use of exemptions aia not enepee sionificantly 
a pe UO 


Exemptions were generally invoked on a case by case 
‘basis and were not used automatically to deny access 
to records. 


The requirements to collect information directly from 
individuals have not adversely aeneetes agency 
operations. 


The availability of information from third party 
_ Sources. has" decreased in some areas. 


Inconsistencies between Federal, State and local privacy 
laws, have created some problems. 


“Most requests for access to records were made by members 
- OF, the general public, and not Federal employees. 


_ More than 95% oF ail requests for access were granted. 


“The. Haber of iaecuies filed ‘under the Privacy Act in 
rs 1977 was twice the number filed in 1976 (141 vs 69). 


ItI SUMMARY OF ACCOMPLISHMENTS AND FUTURE PLANS 
Accomplishments” °~ 


Federal activities during 1977 were directed towards the 
reduction of personal data maintained by Federal agencies 
in order to reduce unnecessary Government intrusion into 
the private lives of Americans and reduce the cost and 
burden of public reporting. This effort was initiated by 
the Director of OMB. in a letter dated March 7, 1977 in 


a 
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SHG gt ed a “4 
which the heads of each executive department and agency 
were requested to develop plans for eliminating or cur= 
tailing systems which contained personal information. : 
Special letters were also sent to the heads of 17 major 
recordkeeping agencies, asking them to place a high 
priority on reducing the amount of personal data main- . 
tained by each agency. Among the results of this effort. | 
were: oes ’ oe ee 


° The Department of Defense, primarily through the 
elimination of duplicate records, reduced its 
number of systems from 2,219 to 2,150 and the 
number of individual records from 321.3 million | 


° The Department. of Commerce eliminated eight systems - 
and reduced the number of individual records by  -37: 
14.3 million. Shbrettee® aah lege) i 


° The General Services Administration was able to 
eliminate 14 systems of records (15% of their 
total) and reduce their records on individuals 
by 44% (from 3.4 million to 1.5 million). 


"© The Department of Transportation eliminated 19 
systems of records. : 


© The Civil Service Commission reduced the number 
of records it maintained from 103.3 million to 
87.8 million (153), but the majority of this was 
due to better estimates on the magnitude of 
recordkeeping. 88 


. 


° The Selective Service System reported that it eliminated. 
1.8 million draft records during 1977.” |; 3s See 
© A number of small agencies concluded that it was not 
feasible to reduce their personal recordkeeping since 
‘they were only collecting and maintaining the minimum 
personal information necessary to perform their mission. 


Future Plans 


Privacy Act activities during 1977 concentrated on a 

reduction in the number of systems and amount of data 
on individuals maintained by the Federal Government. 

Future activities will continue these efforts and con- 
centrate on improving the management of personal data 
to assure compliance with the letter and spixit of the - 
Privacy Act. : 
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Agencies have been encouraged to make their review 
of personal recordkeeping a continuing high priority 
process to assure that unnecessary new recordkeeping 
is prevented and that axisting records, as they 
become unnecessary, are eliminated. The Departments 
of Labor and Commerce, and other agencies, have 
already committed themselves to this effort. 


° In conjunction with the above action, agencies have” 
been encouraged to undertake a qualitative zero~based 
review of their internal programs, policies and 
@irectives for administering the Privacy Act. The 
CIA, DOE, HEW, CSC, DOT and several other agencies 
have indicated their intent to conduct these intensive 
reviews during 1978. 


The Department of Defense has a program underway to 
review data collection forms in order to eliminate 
redundant data elements. This should significantly 
reduce the amount of data collected from DOD employees, 
who are the primary subjects of DOD record systems. 


The Department of Commerce is reviewing six major 
Systems of records for possible elimination in 1978. 


The General Services Administration and the Department 
of Transportation are both continuing their reviews 
-and anticipate further reductions. 


The Selective Service System expects to eliminate an 
additional 8 million records during 1978. 


There is currently underway a Presidential Privacy 
Initiative to identify further actions for protecting 
individual privacy. The basis for this study is the 
“final report of the Privacy Protection Study Commission. 
The Domestic Policy Staff, OMB and other agencies are 
‘participating in this effort: - . 


» During 1978 the Federal Data Processing Reorganization 
Project will release its final report on the Federal 

- Government's acquisition, management and use of 

_ Computers. A portion of this report specifically 
addresses privacy and confidentiality issues. 
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